NETGEAR FVS318 vulnerabilities

4 CVEs affecting NETGEAR FVS318, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0291, published 2005-01-17.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0290, published 2005-01-17. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension.
• CVE-2004-0611, published 2004-12-06. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.
• CVE-2005-0291, published 2005-01-17. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a…
• CVE-2002-1892, published 2002-12-31. Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days. NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information.